The present invention is directed to an architecture and mechanism for securely backing up files and directories on a local machine onto untrusted servers over an insecure network.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A method for processing a file, comprising: deriving a first cryptographic key and a second cryptographic key from a user-provided passphrase, wherein the first cryptographic key and the second cryptographic key are derived if the user-provided passphrase is determined to comprise a sufficient amount of entropy; compressing the file and adding the file to a bundle; generating an authentication code for the bundle using the first cryptographic key and adding the authentication code to the bundle; and encrypting the bundle using the second cryptographic key prior to sending the bundle to a remote server.
2. The method of claim 1 , wherein the bundle is encrypted using a strong block cipher.
3. The method of claim 1 , wherein the authentication code is a keyed-hash message authentication code.
4. The method of claim 1 , wherein the first and second cryptographic keys contain at least 128 bits.
5. The method of claim 1 , where the sufficient amount of entropy comprises a previously defined minimum number of characters.
6. The method of claim 5 , where the sufficient amount of entropy is presented to a user via a progress bar.
7. The method of claim 6 , wherein upon a receipt of each character of the passphrase causes the progress bar to be updated.
8. A non-transitory computer-readable medium storing program instructions for performing a method for processing a file, the method comprising: deriving a first cryptographic key and a second cryptographic key from a user-provided passphrase, wherein the first cryptographic key and the second cryptographic key are derived if the user-provided passphrase is determined to comprise a sufficient amount of entropy; compressing the file and adding the file to a bundle; generating an authentication code for the bundle using the first cryptographic key and adding the authentication code to the bundle; and encrypting the bundle using the second cryptographic key prior to sending the bundle to a remote server.
9. The non-transitory computer-readable medium of claim 8 , wherein the bundle is encrypted using a strong block cipher.
10. The non-transitory computer-readable medium of claim 8 , wherein the authentication code is a keyed-hash message authentication code.
11. The non-transitory computer-readable medium of claim 8 , wherein the first and second cryptographic keys contain at least 128 bits.
12. The non-transitory computer-readable medium of claim 8 , where the sufficient amount of entropy comprises a previously defined minimum number of characters.
13. The non-transitory computer-readable medium of claim 12 , where the sufficient amount of entropy is presented to a user via a progress bar.
14. The non-transitory computer-readable medium of claim 13 , wherein upon a receipt of each character of the passphrase causes the progress bar to be updated.
15. A system for processing a file, comprising: a processor; and a storage area in communication with the processor, wherein the storage area having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by the processor, cause the processor to perform a method, comprising: deriving a first cryptographic key and a second cryptographic key from a user-provided passphrase, wherein the first cryptographic key and the second cryptographic key are derived if the user-provided passphrase is determined to comprise a previously defined minimum number of characters; compressing the file and adding the file to a bundle; generating an authentication code for the bundle using the first cryptographic key and adding the authentication code to the bundle; and encrypting the bundle using the second cryptographic key prior to sending the bundle to a remote server.
16. The system of claim 15 , wherein the bundle is encrypted using a strong block cipher.
17. The system of claim 15 , wherein the authentication code is a keyed-hash message authentication code.
18. The system of claim 15 , where the sufficient amount of entropy comprises a previously defined minimum number of characters.
19. The system of claim 18 , where the sufficient amount of entropy is presented to a user via a progress bar.
20. The system of claim 19 , wherein upon a receipt of each character of the passphrase causes the progress bar to be updated.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
September 19, 2011
September 4, 2012
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.